Correct. I believe AuthenticationHandler is the most customized component in the entire codebase and there are likely a number of third-party components. This will provide a transition path that should be a matter of solely XML configuration changes for 80-90% of them (any that use a UsernamePasswordCredentials).